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What is claimed is: 

\. An electronic data storage apparatus for storing 
electronic data, comprising: 
5 \ key management means for managing an individual 

key umique to the electronic data storage apparatus 
to whiVh said means belongs, and a common key shared 
with otner electronic data storage apparatuses; and 
encrVption means for performing an encrypting 
10 process onXelectronic data stored in the electronic 
data storage^ apparatus to which said means belongs 
using the indwidual key, and performing an encrypting 
process using "ohe common key or with data verification 
on electronic (rata transmitted to or received from 
15 another elect roni\c data storage apparatus. 

2. The apparatus According to claim 1, wherein 
said key management means manages a group key as 

the common key to be shared in a group of a plurality 
20 of electronic data storage apparatuses. 

3. The apparatus according to claim 1, wherein: 

a main electronic dataXstorage apparatus exists 
in the group; \ 
25 said encryption means of\ said main electronic 
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Jata storage apparatus generates an individual key of 
eapJn electronic data storage apparatus in the group 
usi\ag an individual key of the apparatus to which said 
means, belongs; and 

&iaid generated individual key is distributed to 
each electronic data storage apparatus belonging to 
the groups 



4. The appi^ratus according to claim 2, wherein: 
10 a main elvpctronic data storage apparatus exists 

in the group; 

said encryption means of said main electronic 

data storage apparatus generates a group key to be 

shared in the group\ using an individual key of the 
15 apparatus to which sa\d means belongs; and 

said generated groVip key is distributed to each 

electronic data storage >apparatus belonging to the 

group • 

20 5. The apparatus according tp claim 2, wherein: 

a main electronic data stol^age apparatus exists 
in the group; 

said encryption means of said main electronic 
data storage apparatus generates aXgroup key to be 
25 shared in the group with a key prelimrriarily assigned 
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^as -the individual key to said main electronic data 
forage apparatus associated with a new key externally 
^cif ied; and 

said generated group key is distributed to each 
electronic data storage apparatus belonging to the 
group . 

The ^paratus according to claim 2, wherein: 
a main \electronic data storage apparatus exists 
10 in the grou^ and an electronic data storage and 
management ap^ratus for managing respective main 
electronic data a^torage apparatuses in a plurality of 
groups exists; 

said encryptio\;i means of said electronic data 
15 storage and management apparatus generates an 
individual key of each\of said main electronic data 
storage apparatuses usii\g an individual key of the 
apparatus to which said m^ns belongs; and 

said generated individual key is distributed to 
20 each of said main electronic dkta storage apparatuses. 



25 



7. The apparatus according to >^laim 2, wherein 

said key management means ma^iages, in addition 
to said group key as the common key,\a public key for 
use in transmitting electronic data iNj and receiving 
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it from an^'^ectronic data storage apparatus belonging 
to a group dir^erent from a group of the electronic 
data storage apparatus to which said means belongs. 



8^ The— apparatus according to claim 1 , wherein 

said individuairT<Sy-4^,_greliminarily assigned to 
each electronic data storage apparatus~~beTore-use of 
the apparatus . 



10 9.\ The apparatus according to claim 1, wherein: 

said encryption means generates the individual 
key \^th a key preliminarily set before use of the 
apparatus to which said means belongs with a new 
externally specified key; and 
15 said\key management means manages the generated 

individual key. 



10. The apparatus according to claim 1, wherein 

said key m^agement means manages, in addition 
20 to the individual key and the common key, a master key 
to be shared by\ all electronic data storage 
apparatuses . 
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11. The apparatus according to claim 10, wherein: 

said encryption means\ generates the individual 
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key by encrypting information identifying the 
apparatus to which said means belongs using the master 
key ; and 

said key management means manages the generated 
individual key . 

12. The\ apparatus according to claim 11, wherein: 

a martj electronic data storage apparatus exists 
in a group c>f a plurality of electronic data storage 
10 apparatuses; 

said encr^tion means of said main electronic 
data storage appaxatus generates a group key as the 
common key by encrjnpting information identifying the 
group using the generated individual key; and 
15 said generated gr^up key is distributed to each 

electronic data storages^ apparatus belonging to the 
group , 



13. The apparatus according \t:o claim 1, wherein: 
20 a hierarchical structur^ of electronic data 

storage apparatuses is designed jas having a group of 

a plurality of electronic data storage apparatuses as 

one hierarchical level; and \ 

said key management means managesV^^a group key as 
25 the common key depending on a hierarchXcal level of 
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as. group containing the electronic data storage 
apparatus to which said means belongs . 

14. "IShe apparatus according to claim 13, wherein: 
irrv the hierarchical structure of the electronic 

data stoMge apparatuses, an electronic data storage 
and management apparatus for managing electronic data 
storage appa^ratuses in a lower order group exists in 
a group at one level higher than the lower order 
group ; \ 

said encryption means of said electronic data 
storage and managetnent apparatus generates a group key 
for the lower orderXgroup using the individual key of 
the apparatus to whiozh said means belongs; and 

said generated gi;pup key is distributed to the 
electronic data storage^ apparatuses in the group at 
one level lower. \ 

15. A method of managingX electronic data in an 
electronic data storage apparatus in a hierarchical 
structure having a group of a p-Lurality of electronic 
data storage apparatuses as oneXhierarchical level, 
comprising the steps of : \ 

a transmitting electronic dataXstorage apparatus 
in one hierarchical level of the hierarchical 
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■bructure re- encrypt: ing data, encrypted using an 
irtclividual key which is unique to and stored in the 
appS^ratus, using a higher order group key 
corrdeponding to the hierarchical level, and 
transmitting the re-encrypted data to an electronic 
data stoVage and management apparatus for managing the 
electronics data storage apparatuses in a group at one 
hierarchicskl level lower; 

said electronic data storage and management 
apparatus for\ managing a lower group of electronic 
data storage apparatuses verifying the received data 
using the higherX order group key; 

re-encrypting^ the electronic data using the lower 
order group key corresponding to one hierarchical 
level lower if the ^electronic data is correct as a 
result of the verif ica\:ion, and transmitting the data 
to a receiving electronic data storage apparatus in 
the group at one level lc\wer; 

said receiving electrdinic data storage apparatus 
verifying received data usi\jg the lower order group 
key ; and 

re-encrypting and storing Veceived data using an 
individual key unique to the\ apparatus if the 
electronic data is correct as \a result of the 
verification. 
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1^. A method of managing electronic data in an 
electronic data storage apparatus in a hierarchical 
struQcture having a group of a plurality of electronic 
data storage apparatuses as one hierarchical level, 
5 comprisirig the steps of: 

a transmitting electronic data storage apparatus 
in one hierarchical level of the hierarchical 
structure rV-encrypting data, encrypted using an 
individual key which is unique to and stored in the 

10 apparatus, usind a lower order group key corresponding 
to the hierarchical level, and transmitting the re- 
encrypted data toV lower order group electronic data 
storage and management apparatus for managing the 
electronic data storage apparatuses in the group; 

15 said electronic \ data storage and management 

apparatus for managingXa lower group of electronic 
data storage apparatusesVverif ying the received data 
using the lower order group key; 

re-encrypting the electronic data using the 

20 higher order group key Vcorresponding to one 
hierarchical level higher if \the electronic data is 
correct as a result of the verification, and 
transmitting the data to a receiving electronic data 
storage apparatus in the group at \pne level higher; 

25 said receiving electronic dataXstorage apparatus 
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verifying received data using the higher order group 
:ey ; and 

re-encryp-bing and storing received data using an 
indJ-vidual key unique to the apparatus if the 
electronic data is correct as a result of the 
ver i f :^cat ion . 



17. A ihethod of storing electronic data in an 
electronic^ data storage apparatus for storing the 
10 electronic J|ata, comprising the steps of: 

communicating electronic data using a common key 
shared with otn^r electronic data storage apparatuses; 
and 

performing \n encrypting process using an 
15 individual key unic^ue to an electronic data storage 
apparatus on data to \e stored in the electronic data 
storage apparatus . 



18. The method according \bo claim 17, wherein 
20 said electronic data storage apparatus stores as 

the common key a group key staared in one group of a 

plurality of electronic data storage apparatuses; 

a transmitting electronic data storage apparatus 

transmits electronic data after r^-encrypting using 
25 the group key the data stored in the apparatus and 
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encrypted using the individual key; 

\ a receiving electronic data storage apparatus 
veriVies the received electronic data using the group 
key; and 

5 whMi the electronic data is correct according to 

a result qf the verification, said electronic data is 
re-encrypted using the individual key and stored. 

19. The method according to claim 17, wherein 
10 said electTOnic data storage apparatus belonging 

to a group of electronic data storage apparatuses 
stores as the common key a public key of an electronic 
data storage apparatus belonging to another group of 
a plurality of electrbnic data storage apparatuses; 
15 a transmitting electronic data storage apparatus 

transmits electronic data after re-encrypting using 
the public key the data stored in the apparatus and 
encrypted using the indiviolial key; 

a receiving electronic \data storage apparatus 
20 verifies the received electroniSc data using a private 
key which is a pair to the public key; and 

when the electronic data is c^Drrect according to 
a result of the verification, said electronic data is 
re-encrypted using the individual ke^ and stored. 
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2?X. A computer- readable storage medium used in an 
ele6^ronic data storage apparatus and storing a 
prograpi to direct a computer to execute the steps of : 
versifying stored electronic data using an 
indi vidua jS^ key unique to the electronic data storage 
apparatus; ^d 

transmit-l^ing the electronie-v^ata to a receiving 
apparatus afterV re- encrypt iiig tme electronic data 
using a common key^ehared wi^h the/recpd^ving apparatus 
when a result of th^verif i^at^fen is correct. 



21. A computer- readable^ storage medium used in an 
electronic data storage Napparatus and storing a 
program to direct a computer >^o execute the steps of : 
15 verifying externally recJfeived electronic data 

using a common key shared w^th a transmitting 
apparatus of the electronic data; ^nd 

re-encrypting the electronic \data using an 
individual key unique to the electroniJ^data storage 
20 apparatus and storing the data when a re^^ult of the 
verification is correct. 



